Static task
static1
Behavioral task
behavioral1
Sample
4af38f7505d6c086d37ca7b3f035395508b00ff6759eccf7eb521011c2085901.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4af38f7505d6c086d37ca7b3f035395508b00ff6759eccf7eb521011c2085901.exe
Resource
win10v2004-20220812-en
General
-
Target
4af38f7505d6c086d37ca7b3f035395508b00ff6759eccf7eb521011c2085901
-
Size
280KB
-
MD5
6ad97c2100522b12f2fafd3a202e2e5a
-
SHA1
238c72e5c71e09f59348070802b0f4cb22d6798f
-
SHA256
4af38f7505d6c086d37ca7b3f035395508b00ff6759eccf7eb521011c2085901
-
SHA512
5afad7e252e66d363b9754217cf5e5a35905badfc82a5e142768890a94d21e86ba8fb76dce2465ad57f6517846e2f993e0793c8f7fb60feead0798ad9fb8380e
-
SSDEEP
3072:EIdcFLcdskgrt05bnwhVh6PTP/3NL0X1Y5N+BZiB/aZVqDvWPP:BWrZ0xCVh6r3FYrXi0ZwDOP
Malware Config
Signatures
Files
-
4af38f7505d6c086d37ca7b3f035395508b00ff6759eccf7eb521011c2085901.exe windows x86
fc39d6bcccc6aed12cc7b3f6f5003c3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
ord617
ord581
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
erqvikw Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ryuwpql Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE